$ tail -f topics/javascript.log
Daily updates from the JavaScript and TypeScript world - Node.js, React, Vue, Next.js, Vercel, and the platform layers built on them.
41 updates across 6 projects this week.
One calm review of what shipped across JavaScript - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top JavaScript projects - refine anytime. · Read a sample issue →
Node.js
Five undici security fixes address WebSocket, cache, and connection handling vulnerabilities, while Node.js core fixes permission audit mode and stream overhead.
read --wire →
Vue.js
Vue Test Utils now shares a single configuration object across CJS and ESM builds, fixing integrations like vue-router-mock in Vitest Browser Mode without consumer workarounds.
read --wire →
Vercel
vercel-py is porting to httpx2 and encrypting workflow payload writes, while chat fixes its stalled release pipeline and a CSS sourcemap bug lands in Turbopack.
read --wire →
Shopify
Two Shopify CLI commands now explain why an organization picker suddenly appears, and Hydrogen docs no longer send contributors to an install-time failure.
read --wire →
Meta
Core component specs stop announcing old-architecture names, and e2e suites get guards for flaky keyboard and startup timing.
read --wire →
Supabase
The Supabase CLI gained config pull, workers log streaming, and an opt-out for build waiting, while the observability docs were reorganized into an 'Observe the data hub'.
read --wire →
Node.js
Loading node:domain now warns at runtime, and net.BlockList round-trips IPv4-mapped IPv6 rules correctly.
read --wire →
Vue.js
create-vue updated its non-major dependencies, advancing @vue/test-utils from ^2.4.11 to ^2.5.0.
read --wire →
Vercel
Eve 0.51.0 ships per-session USD token-cost limits, while Next.js now returns precise client errors for unrecognized Server Actions.
read --wire →
Shopify
Shopify CLI's interactive dev store creation now prompts for demo data, and the `--with-demo-data` flag becomes tri-state `--demo-data`.
read --wire →
Meta
Jest now strips TypeScript types from unclaimed files, while React addresses DevTools release reproducibility and Fizz import map security.
read --wire →
Supabase
postgrest-typegen 0.2.1 ships fixes that reshape how it resolves computed fields and handles trigger views, while a dependency drop cleans up ESM consumption.
read --wire →
Node.js
Undici patches a stack overflow in Set-Cookie parsing and a UTF-8 validation gap in EventSource reconnects, while Node core improves diagnostics, QUIC handshakes, and resource timing.
read --wire →
Vue.js
VitePress now surfaces unhandled SSR errors in production, while JSX Vapor streamlines slot internals and preserves union component props.
read --wire →
Vercel
The AI SDK adds configurable recovery for provider errors that arrive after streamText starts streaming, and the Gemini Interactions adapter now supports agentic video processing.
read --wire →
Shopify
Shopify CLI stopped printing and reporting store signup JWTs, aligning with a security finding that classifies them as never-to-be-printed server secrets.
read --wire →
Meta
The React Compiler's Rust port shaves memory and allocations while Jest reverts a 30.5.0 moduleNameMapper regression.
read --wire →
Supabase
DuckDB connections now share a single instance with multiple connections, advisor output groups lints to cut response bloat, and realtime v2.133.0 ships across platforms.
read --wire →
Node.js
Node.js core adds a new API to dump a sampled heap profile near the heap limit and fixes a live lock that could wedge multi-isolate environments.
read --wire →
Vue.js
test-utils' dependency update bumps @vue/compat from 3.5.41 to 3.5.42 in a maintenance PR.
read --wire →
